Re: checking for enable-weak-ssl-ciphers at runtime?

2020-05-23 Thread Daniel Lenski
> Other than looping through all of the ciphers with SSL_get_ciphers() > right after this… is there a better way to check for 3DES/RC4 support > right at startup, so we can give immediate feedback that connecting to > such a server cannot succeed? It was suggested that I should try EVP_get_ciphern

checking for enable-weak-ssl-ciphers at runtime?

2020-05-23 Thread Daniel Lenski
Hi all, What I'm trying to figure out: what's the best way to check whether 3DES/RC4 support are available in the OpenSSL build we're using, so that we can give users a clearer explanation of why a connection to an ancient server fails? Background: I'm one of the developers of OpenConnect and re